Friday, 2021-01-29

*** tmhoang has quit IRC00:18
*** tmhoang has joined #kata-general00:19
kata-irc-bot1<gwenn.etourneau_kata-> Anyone ?01:15
*** fuentess has quit IRC03:40
kata-irc-bot1<eric.ernst> Kata just runs container images.03:45
kata-irc-bot1<eric.ernst> You mean you have something like a qcow or some other VM image you'd like to launch?03:45
kata-irc-bot1<eric.ernst> I think you'd want to use something like KubeVirt for that use case.03:45
kata-irc-bot1<eric.ernst> @gwenn.etourneau_kata- ^^04:33
kata-irc-bot1<gwenn.etourneau_kata-> Thanks @eric.ernst, so Kata only use same isolation right ?04:34
kata-irc-bot1<eric.ernst> Correct. Really, the goal is for you to not worry about any kind of VM image, etc. Just focus on running your usual container workload, and we provide. the second layer of isolation.05:24
kata-irc-bot1<gwenn.etourneau_kata-> Got it.05:27
*** sgarzare has joined #kata-general08:21
*** sameo has joined #kata-general08:28
*** sameo has quit IRC10:29
*** sameo has joined #kata-general10:35
*** sameo has quit IRC10:46
*** sameo has joined #kata-general11:11
*** devimc has joined #kata-general12:53
*** fuentess has joined #kata-general14:06
*** devimc has quit IRC14:58
*** devimc has joined #kata-general14:59
*** sameo has quit IRC15:29
*** sameo has joined #kata-general15:30
*** sgarzare has quit IRC16:32
kata-irc-bot1<anders.franzen> Hi Kata folks, I tried to run a kata-container pod i kubernetes. The was also an NSM client. NSM (Network Service Mesh) works by providing Unix sockets via the Device Plugin API in k8s. So when a client pod starts, it can communicate with the NSM control plane, using grpc over this unix socket. A service in NSM is delivered as an ethernet interface into the pod. NSM is using the Unix socket to do a setns, moving an interface18:18
kata-irc-bot1into the pod. Of course all this failed bad in with the client running as untrusted in kata. Now my question, how would I go about to enable the use of NSM in kata managed pods. I assume I would have to write som Agent that runs outside the VM??, I tried to search the messages here, but did not find anything about this, is it anything you have thought about?18:18
devimc@anders.franzen 1.x or 2.x ?18:26
devimcsidecar injection is not working in 2.x, well, at least not for me18:27
kata-irc-bot1<anders.franzen> Thanks for the answer, yes it was 2.0, would be possible for it to work with 1.x ??18:32
devimc@anders.franzen 1.x works for me18:33
devimc1.12.118:33
kata-irc-bot1<anders.franzen> Did you try Network Service Mesh?18:34
devimc@anders.franzen, nop, just istio18:36
kata-irc-bot1<anders.franzen> Ok, but still usefull info Thank you!18:36
devimcyw18:36
*** devimc has quit IRC21:57
*** fuentess has quit IRC23:11

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!